#!/usr/bin/env bash

# Configuration variables with defaults
# URLs and remote resources
KANIDM_SERVER_CONFIG_URL="${KANIDM_SERVER_CONFIG_URL:-https://raw.githubusercontent.com/kanidm/kanidm/master/examples/server.toml}"
KANIDM_DOCKER_IMAGE="${KANIDM_DOCKER_IMAGE:-docker.io/kanidm/server:latest}"

# File paths
SERVER_CONFIG_FILE="${SERVER_CONFIG_FILE:-server.toml}"
SERVER_LOCALHOST_CONFIG="${SERVER_LOCALHOST_CONFIG:-server_localhost.toml}"
CLIENT_CONFIG_FILE="${CLIENT_CONFIG_FILE:-./kanidm}"

# Container and volume settings
CONTAINER_NAME="${CONTAINER_NAME:-kanidmd}"
VOLUME_NAME="${VOLUME_NAME:-kanidmd}"
CONTAINER_DATA_PATH="${CONTAINER_DATA_PATH:-/data}"

# Network settings
HTTPS_PORT="${HTTPS_PORT:-8443}"
LDAP_PORT="${LDAP_PORT:-3636}"
KANIDM_URI="${KANIDM_URI:-https://localhost:8443}"

# Domain settings
ORIGINAL_DOMAIN="${ORIGINAL_DOMAIN:-idm.example.com}"
TARGET_DOMAIN="${TARGET_DOMAIN:-localhost}"

# Account names
ADMIN_ACCOUNT="${ADMIN_ACCOUNT:-admin}"
IDM_ADMIN_ACCOUNT="${IDM_ADMIN_ACCOUNT:-idm_admin}"

# Package lists
FEDORA_SYSTEM_DEPS="${FEDORA_SYSTEM_DEPS:-systemd-devel sqlite-devel openssl-devel pam-devel clang lld}"
FEDORA_WEBUI_DEPS="${FEDORA_WEBUI_DEPS:-perl-FindBin perl-File-Compare}"


fedora_build_notes () {
	echo "NOTE: clang and lld are required to build Kanidm for performance"
	echo "Rustup toolchain is needed"

}
install_system_lib_deps_fedora () {
	dnf install ${FEDORA_SYSTEM_DEPS}
}

install_webui_additional_pkgs () {
	dnf install ${FEDORA_WEBUI_DEPS}
}

get_server_dev_config () {
	wget "${KANIDM_SERVER_CONFIG_URL}"
}

make_localhost_config () {
	if [[ -f "${SERVER_CONFIG_FILE}" ]];then
		sed "s/${ORIGINAL_DOMAIN}/${TARGET_DOMAIN}/g" "${SERVER_CONFIG_FILE}" > "${SERVER_LOCALHOST_CONFIG}"
	else
		echo "First get example ${SERVER_CONFIG_FILE}!"
	fi
}

get_the_software () {
	podman pull "${KANIDM_DOCKER_IMAGE}"
}

create_eval_config () {
	get_server_dev_config && make_localhost_config
}

create_kanidmd_volume () {
	# First create volume for the data!
	podman volume create "${VOLUME_NAME}"
}

start_eval_container () {
	create_kanidmd_volume && podman create --name "${CONTAINER_NAME}" \
		-p "${HTTPS_PORT}:${HTTPS_PORT}" \
		-p "${LDAP_PORT}:${LDAP_PORT}" \
		-v "${VOLUME_NAME}:${CONTAINER_DATA_PATH}" \
		"${KANIDM_DOCKER_IMAGE}"
}

copy_config_to_container () {
	podman cp "${SERVER_LOCALHOST_CONFIG}" "${CONTAINER_NAME}:${CONTAINER_DATA_PATH}/${SERVER_CONFIG_FILE}"
}

generate_eval_certs () {
	podman run --rm -i -t -v "${VOLUME_NAME}:${CONTAINER_DATA_PATH}" \
		"${KANIDM_DOCKER_IMAGE}" \
		kanidmd cert-generate
}

recover_admin_pw () {
	podman exec -i -t "${CONTAINER_NAME}" \
		kanidmd recover-account "${ADMIN_ACCOUNT}"
}

recover_idm_admin_pw () {
	podman exec -i -t "${CONTAINER_NAME}" \
		kanidmd recover-account "${IDM_ADMIN_ACCOUNT}"
}

setup_eval_client_config () {
	cat <<EOF > "${CLIENT_CONFIG_FILE}"
uri = "${KANIDM_URI}"
verify_ca = false
EOF
}

check_can_login () {
	if ! command -v kanidm > /dev/null; then
		echo "First install kanidm client tools!"
	else
		kanidm login --name "${IDM_ADMIN_ACCOUNT}"
	fi
}

create_account () {
	# Usage:
	#	kanidm person create <username> <Display Name>

	echo "Implement create_account"
}

setup_account_credentials () {
	# Usage:
	#	kanidm person credential create-reset-token <username>
	echo "Implement setup_account_credentials"
}